Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59588A84C7A211F1AD06780ACF1D38B0.roa
File:                     59588A84C7A211F1AD06780ACF1D38B0.roa (raw, json)
Hash identifier:          llbKk7I7aBgqi3led8FK5zEvTO8Tp6G5a8hi2a/Ivzw=
Subject key identifier:   29:99:01:58:C3:F8:CC:D4:F7:0D:52:79:16:10:DB:E5:2C:F2:2F:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59588A84C7A211F1AD06780ACF1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:39:12 +0000
ROA not before:           Wed 14 Oct 2026 07:39:08 +0000
ROA not after:            Sat 21 Nov 2026 07:39:08 +0000
asID:                     214143
IP address blocks:        154.82.172.0/23 maxlen: 24
                          154.82.174.0/23 maxlen: 24
                          154.82.176.0/23 maxlen: 24
                          154.82.178.0/23 maxlen: 24
                          154.82.180.0/24 maxlen: 24
                          154.83.18.0/23 maxlen: 24
                          154.83.32.0/24 maxlen: 24
                          154.83.40.0/23 maxlen: 24
                          154.83.42.0/23 maxlen: 24
                          154.83.72.0/23 maxlen: 24
                          154.83.74.0/23 maxlen: 24
                          154.83.76.0/23 maxlen: 24
                          154.93.1.0/24 maxlen: 24
                          154.93.3.0/24 maxlen: 24
                          154.93.26.0/24 maxlen: 24
                          154.93.28.0/22 maxlen: 24
                          154.94.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126451 (0x1edf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:39:08 2026 GMT
            Not After : Nov 21 07:39:08 2026 GMT
        Subject: CN=6acf31a0-ad8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:4d:82:1d:e9:26:52:c6:7a:63:b7:7c:65:
                    c8:53:c2:b2:3d:8a:6c:e0:11:ad:1b:a9:60:a1:3f:
                    0c:4d:6a:10:84:14:8e:4e:f2:72:2e:64:37:a2:42:
                    d0:64:2a:c8:70:49:68:6b:5e:59:24:2c:0b:5c:5b:
                    7e:ea:e8:89:ee:3c:93:2a:bd:8d:b7:69:8b:2a:aa:
                    70:58:d8:ee:26:fb:4c:29:2c:36:52:ee:3d:43:88:
                    0e:be:1e:ed:17:26:32:39:f2:8e:b5:3c:84:61:a6:
                    ca:fe:4f:3f:4f:88:b4:ad:69:03:5b:6a:ba:c1:b0:
                    11:26:d3:19:a6:ba:b5:af:83:30:15:e7:39:c9:f4:
                    f4:28:c4:33:71:d0:8a:40:a5:c8:89:e6:e5:71:09:
                    5a:e2:8b:f6:5d:a4:ca:01:97:37:48:2a:a9:aa:ea:
                    88:c8:77:44:c5:7b:76:cc:01:6c:5c:4b:49:f7:15:
                    bf:ce:ec:a8:bf:e5:06:f7:67:f4:8f:a1:6a:d1:0d:
                    68:3e:dc:1c:2c:d8:a7:3e:c3:dd:33:12:aa:9c:24:
                    ae:27:e6:b8:ab:b7:43:ea:c1:2f:50:77:a3:ea:f9:
                    52:61:89:fe:5c:81:16:bf:1f:ae:6a:e7:ec:79:31:
                    8e:3a:3d:17:5b:0d:a4:77:86:dd:7d:d1:b7:7a:bb:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:99:01:58:C3:F8:CC:D4:F7:0D:52:79:16:10:DB:E5:2C:F2:2F:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59588A84C7A211F1AD06780ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.172.0-154.82.180.255
                  154.83.18.0/23
                  154.83.32.0/24
                  154.83.40.0/22
                  154.83.72.0-154.83.77.255
                  154.93.1.0/24
                  154.93.3.0/24
                  154.93.26.0/24
                  154.93.28.0/22
                  154.94.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bb:1a:f2:cd:62:72:cb:e5:82:f4:07:cf:29:34:fb:e0:15:
         09:f6:c8:4a:22:6c:6d:50:3e:c1:72:32:66:26:ad:95:06:98:
         b2:b9:1e:da:fa:79:24:97:6d:3f:a1:55:3f:91:28:f7:e0:2e:
         ba:cf:c2:2e:64:e0:e6:02:a9:eb:d4:02:b1:b9:65:2e:80:57:
         0f:1c:6f:c1:79:08:dc:4a:2f:14:3f:66:89:27:d0:d5:5f:15:
         26:21:eb:e6:19:02:af:3d:6f:14:6d:a4:d5:cb:63:5b:f7:62:
         b3:3c:4b:e6:cb:94:2b:59:48:0b:7c:ca:80:0a:58:8d:a4:56:
         a4:aa:a3:55:7d:ae:0b:8e:88:a0:a4:9d:f8:3e:f7:7c:ac:a2:
         9e:49:4c:ba:fe:a6:d3:3e:f7:c0:f8:d2:c5:1f:d7:75:34:95:
         2f:e4:ea:0d:35:7c:b8:ed:ba:16:bc:b5:e7:03:9f:83:f1:5e:
         3a:ca:10:be:4b:9f:73:a4:2c:27:47:44:7f:f4:d1:6f:72:2d:
         54:39:88:0d:09:9c:63:4e:11:17:d9:27:dc:92:60:c7:ee:fb:
         4e:0e:cc:1b:71:0f:fc:f5:49:fd:03:95:4d:67:59:6d:ea:8e:
         7b:70:2e:35:b1:12:b2:1a:7b:33:d1:a0:d1:b0:b1:27:6c:89:
         88:de:ef:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----